Re:Automatic SSL Certificates for internal IP's for home k8 ...
by tialaramex on Thursday September 03, 2020 @08:39AM
(#24363406)
The IP of the machine requesting the certificate is recorded by Let's Encrypt, but it is not (ordinarily) made public and certainly isn't (as you can see by inspecting it for yourself) saved with the certificate information.
ISRG is required to keep enough information about the issuances they make to allow them to usefully diagnose problems after the fact. Ideally when we discover a problem it will be possible for the issuer to go back and figure out which (if any) previously issued certificates were affected so that these certificates can be revoked if appropriate.
But although they had at one point planned to publish more of this information, they do not in fact do this routinely.
Re:Automatic SSL Certificates for internal IP's for home k8 ...
by creztoe on Saturday September 05, 2020 @11:42AM
(#24384360)
Yeah, I was referring to the certbot warning of "logging" the IP publicly. But I guess that policy never actually came to fruition. Thanks for the clarification!
ISRG is required to keep enough information about the issuances they make to allow them to usefully diagnose problems after the fact. Ideally when we discover a problem it will be possible for the issuer to go back and figure out which (if any) previously issued certificates were affected so that these certificates can be revoked if appropriate.
But although they had at one point planned to publish more of this information, they do not in fact do this routinely.